<!DOCTYPE html>
<html lang="en">
  <head>
    <link rel="stylesheet" type="text/css" href="/css/style.css?v=18" />
    <link rel="stylesheet" type="text/css" href="/css/fontello.css?v=2" />
    <link rel="stylesheet" type="text/css" href="/css/themes/nitter.css" />
    <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" />
    <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" />
    <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" />
    <link rel="manifest" href="/site.webmanifest" />
    <link rel="mask-icon" href="/safari-pinned-tab.svg" color="#ff6c60" />
    <link rel="search" type="application/opensearchdescription+xml" title="nitter" href="https://nitter.net/opensearch" />
    <link rel="canonical" href="https://twitter.com/Alh4zr3d/status/1578406155453276160" />
    <title>Alh4zr3d (@Alh4zr3d): &quot;Red Teamers, following my previous tweet on hiding procs, now we hide SSH connections:

&quot;ssh -o UserKnownHostsFile=&#x2F;dev&#x2F;null -T user@target.com &#x27;bash -i&#x27;&quot;

Your user:
- is not added to &#x2F;var&#x2F;log&#x2F;utmp
- won&#x27;t appear in w or who cmd
- has no .profile or .bash_profile

#redteaming&quot;|nitter</title>
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <meta name="theme-color" content="#1F1F1F" />
    <meta property="og:type" content="article" />
    <meta property="og:title" content="Alh4zr3d (@Alh4zr3d)" />
    <meta property="og:description" content="Red Teamers, following my previous tweet on hiding procs, now we hide SSH connections:

&quot;ssh -o UserKnownHostsFile=/dev/null -T user@target.com 'bash -i'&quot;

Your user:
- is not added to /var/log/utmp
- won't appear in w or who cmd
- has no .profile or .bash_profile

#redteaming" />
    <meta property="og:site_name" content="Nitter" />
    <meta property="og:locale" content="en_US" />
    <link rel="preload" type="font/woff2" as="font" href="/fonts/fontello.woff2?21002321" crossorigin="anonymous" />
  </head>
  <body>
    <nav><div class="inner-nav">
        <div class="nav-item"><a class="site-name" href="/">nitter</a></div>
        <a href="/"><img class="site-logo" src="/logo.png" alt="Logo" /></a>
        <div class="nav-item right">
          <div class="icon-container"><a class="icon-search" title="Search" href="/search"></a></div>
          <div class="icon-container"><a class="icon-bird" title="Open in Twitter" href="https://twitter.com/Alh4zr3d/status/1578406155453276160"></a></div>
          <a href="https://liberapay.com/zedeus"><svg class="lp" viewBox="0 0 40.6 52.3">
  <g transform="matrix(0.83,0,0,0.83,-158,-261)">
    <path d="m202.5,366c-3.1 0-5.5-0.4-7.3-1.2-1.8-0.8-3-1.9-3.8-3.3-0.8-1.4-1.1-3-1.1-4.8 0-1.8 0.3-3.7 0.8-5.8l8.3-34.8 10.2-1.6-9.1 37.8c-0.2 0.8-0.3 1.5-0.3 2.2 0 0.7 0.1 1.2 0.4 1.7 0.3 0.5 0.7 0.9 1.3 1.2 0.6 0.3 1.5 0.5 2.7 0.6l-2 8.1"/>
    <path d="m239.2 344.3c0 3.2-0.5 6.1-1.6 8.8-1 2.6-2.5 4.9-4.4 6.9-1.9 1.9-4.1 3.4-6.7 4.5-2.6 1.1-5.4 1.6-8.5 1.6-1.5 0-3-0.1-4.5-0.4l-3 11.9h-9.7l10.9-45.4c1.7-0.5 3.7-1 6-1.4 2.3-0.4 4.7-0.6 7.3-0.6 2.4 0 4.6 0.4 6.3 1.1 1.8 0.7 3.2 1.8 4.4 3 1.1 1.3 2 2.8 2.5 4.5 0.5 1.7 0.8 3.6 0.8 5.5m-23.8 13.4c0.7 0.2 1.7 0.3 2.8 0.3 1.7 0 3.3-0.3 4.7-1 1.4-0.6 2.6-1.5 3.6-2.7 1-1.1 1.7-2.5 2.3-4.1 0.5-1.6 0.8-3.4 0.8-5.3 0-1.9-0.4-3.5-1.2-4.8-0.8-1.3-2.3-2-4.3-2-1.4 0-2.7 0.1-3.9 0.4l-4.6 19.1"/>
  </g>
</svg>
</a>
          <div class="icon-container"><a class="icon-info" title="About" href="/about"></a></div>
          <div class="icon-container"><a class="icon-cog" title="Preferences" href="/settings?referer=%2FAlh4zr3d%2Fstatus%2F1578406155453276160%23m"></a></div>
        </div>
      </div></nav>
    <div class="container"><div class="conversation">
        <div class="main-thread">
          <div id="m" class="main-tweet"><div class="timeline-item thread thread-line"><div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/Alh4zr3d"><img class="avatar round" src="/pic/profile_images%2F1261794478450331648%2FBAyT3XZw_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/Alh4zr3d" title="Alh4zr3d">Alh4zr3d</a>
                        <a class="username" href="/Alh4zr3d" title="@Alh4zr3d">@Alh4zr3d</a>
                      </div>
                      <span class="tweet-date"><a href="/Alh4zr3d/status/1578406155453276160#m" title="Oct 7, 2022 · 3:25 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="tweet-content media-body" dir="auto">Red Teamers, following my previous tweet on hiding procs, now we hide SSH connections:

"ssh -o UserKnownHostsFile=/dev/null -T user@target.com 'bash -i'"

Your user:
- is not added to /var/log/utmp
- won't appear in w or who cmd
- has no .profile or .bash_profile

<a href="/search?q=%23redteaming">#redteaming</a></div>
                <p class="tweet-published">Oct 7, 2022 · 3:25 PM UTC · Twitter Web App</p>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 64</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span> 465</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span> 11</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span> 2,108</div></span>
                </div>
              </div></div></div>
          <div class="after-tweet thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/Alh4zr3d/status/1578407927471226881#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/Alh4zr3d"><img class="avatar round" src="/pic/profile_images%2F1261794478450331648%2FBAyT3XZw_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/Alh4zr3d" title="Alh4zr3d">Alh4zr3d</a>
                        <a class="username" href="/Alh4zr3d" title="@Alh4zr3d">@Alh4zr3d</a>
                      </div>
                      <span class="tweet-date"><a href="/Alh4zr3d/status/1578407927471226881#m" title="Oct 7, 2022 · 3:32 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="tweet-content media-body" dir="auto">This is also a really useful tip on <a href="/RealTryHackMe" title="TryHackMe">@RealTryHackMe</a> 's King of the Hill, because users will have a much harder time finding your pty to which to send /dev/urandom and rick rolls.</div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 2</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span> 3</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span> 70</div></span>
                </div>
              </div>
            </div></div>
        </div>
        <div id="r" class="replies">
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/s4nsec/status/1578412727470620672#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/s4nsec"><img class="avatar round" src="/pic/profile_images%2F1399140577887784960%2F6WYTSJ5p_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/s4nsec" title="Sanan Hasanov">Sanan Hasanov</a>
                        <a class="username" href="/s4nsec" title="@s4nsec">@s4nsec</a>
                      </div>
                      <span class="tweet-date"><a href="/s4nsec/status/1578412727470620672#m" title="Oct 7, 2022 · 3:51 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a> <a href="/N4k3dTurtl3">@N4k3dTurtl3</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a> <a href="/search?q=%23tweet">#tweet</a> <a href="/search?q=%23redteam">#redteam</a> <a href="/search?q=%23linux">#linux</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 1</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/myther/status/1578415077870694400#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/myther"><img class="avatar round" src="/pic/profile_images%2F1482784407966597120%2FjXD7UOKM_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/myther" title="Мифотворец">Мифотворец</a>
                        <a class="username" href="/myther" title="@myther">@myther</a>
                      </div>
                      <span class="tweet-date"><a href="/myther/status/1578415077870694400#m" title="Oct 7, 2022 · 4:00 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 2</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/N7WEra/status/1578419835146743808#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/N7WEra"><img class="avatar round" src="/pic/profile_images%2F1265193865457405952%2FgKupHxvm_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/N7WEra" title="N7WEra">N7WEra</a>
                        <a class="username" href="/N7WEra" title="@N7WEra">@N7WEra</a>
                      </div>
                      <span class="tweet-date"><a href="/N7WEra/status/1578419835146743808#m" title="Oct 7, 2022 · 4:19 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a> <a href="/tde_sec">@tde_sec</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 1</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/MichaSchiesser/status/1578420330221010947#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/MichaSchiesser"><img class="avatar round" src="/pic/abs.twimg.com%2Fsticky%2Fdefault_profile_images%2Fdefault_profile_bigger.png" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/MichaSchiesser" title="Michael Schießer">Michael Schießer</a>
                        <a class="username" href="/MichaSchiesser" title="@MichaSchiesser">@MichaSchiesser</a>
                      </div>
                      <span class="tweet-date"><a href="/MichaSchiesser/status/1578420330221010947#m" title="Oct 7, 2022 · 4:21 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a> <a href="/search?q=%23Thread">#Thread</a> <a href="/search?q=%23redteam">#redteam</a> <a href="/search?q=%23ssh">#ssh</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 1</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/HamadSalamo/status/1578421370140372994#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/HamadSalamo"><img class="avatar round" src="/pic/profile_images%2F1173473048885956611%2FTcNVRJ3D_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/HamadSalamo" title="Salamo حمد">Salamo حمد</a>
                        <a class="username" href="/HamadSalamo" title="@HamadSalamo">@HamadSalamo</a>
                      </div>
                      <span class="tweet-date"><a href="/HamadSalamo/status/1578421370140372994#m" title="Oct 7, 2022 · 4:25 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 1</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/wvuuuuuuuuuuuuu/status/1578423858574393348#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/wvuuuuuuuuuuuuu"><img class="avatar round" src="/pic/profile_images%2F1501354987602993154%2FbeTgS5mj_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/wvuuuuuuuuuuuuu" title="wvu">wvu</a>
                        <a class="username" href="/wvuuuuuuuuuuuuu" title="@wvuuuuuuuuuuuuu">@wvuuuuuuuuuuuuu</a>
                      </div>
                      <span class="tweet-date"><a href="/wvuuuuuuuuuuuuu/status/1578423858574393348#m" title="Oct 7, 2022 · 4:35 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto">And, to your example, the local known_hosts file isn't updated.</div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span> 5</div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/frankiel01/status/1578435422602268672#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/frankiel01"><img class="avatar round" src="/pic/profile_images%2F1525980204686098432%2Fm0bm88mt_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/frankiel01" title="fk.m10">fk.m10</a>
                        <a class="username" href="/frankiel01" title="@frankiel01">@frankiel01</a>
                      </div>
                      <span class="tweet-date"><a href="/frankiel01/status/1578435422602268672#m" title="Oct 7, 2022 · 5:21 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span> 1</div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/AntoineAuger1/status/1578438797754146816#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/AntoineAuger1"><img class="avatar round" src="/pic/profile_images%2F1248945731098095617%2F58iWQqVW_bigger.jpg" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/AntoineAuger1" title="Antoine Auger">Antoine Auger</a>
                        <a class="username" href="/AntoineAuger1" title="@AntoineAuger1">@AntoineAuger1</a>
                      </div>
                      <span class="tweet-date"><a href="/AntoineAuger1/status/1578438797754146816#m" title="Oct 7, 2022 · 5:35 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a> <a href="/search?q=%23thread">#thread</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="reply thread thread-line"><div class="timeline-item thread-last ">
              <a class="tweet-link" href="/RBoomboom12312/status/1578440173360410624#m"></a>
              <div class="tweet-body">
                <div><div class="tweet-header">
                    <a class="tweet-avatar" href="/RBoomboom12312"><img class="avatar round" src="/pic/abs.twimg.com%2Fsticky%2Fdefault_profile_images%2Fdefault_profile_bigger.png" alt="" /></a>
                    <div class="tweet-name-row">
                      <div class="fullname-and-username">
                        <a class="fullname" href="/RBoomboom12312" title="Roy_Boomboom12312">Roy_Boomboom12312</a>
                        <a class="username" href="/RBoomboom12312" title="@RBoomboom12312">@RBoomboom12312</a>
                      </div>
                      <span class="tweet-date"><a href="/RBoomboom12312/status/1578440173360410624#m" title="Oct 7, 2022 · 5:40 PM UTC">Oct 7</a></span>
                    </div>
                  </div></div>
                <div class="replying-to">Replying to <a href="/Alh4zr3d">@Alh4zr3d</a></div>
                <div class="tweet-content media-body" dir="auto"><a href="/SaveToNotion" title="Save to Notion ">@SaveToNotion</a> <a href="/search?q=%23tweet">#tweet</a></div>
                <div class="tweet-stats">
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-comment" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-retweet" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-quote" title=""></span></div></span>
                  <span class="tweet-stat"><div class="icon-container"><span class="icon-heart" title=""></span></div></span>
                </div>
              </div>
            </div></div>
          <div class="show-more"><a href="?cursor=LBmmgIC8nemA0%2BcriICgtd6I2OcrgMDRxcWe1ucrhoCgka671ucrgMDQke2p3ecrgMDTidGJ1OcrhMDRkfL31ucrgMDThbG%2B3%2BcrgICl%2Fafu3ucrgoCqubbp0OcrJQISAAA%3D#r">Load more</a></div>
        </div>
        <div class="top-ref"><div class="icon-container"><a class="icon-down" title="" href="#m"></a></div></div>
      </div></div>
  </body>
</html>